Privacy Policy

ZiruYai ("we", "us") respects your privacy. This policy explains what personal information we collect when you visit our website or contact us, how we use and protect it, and the rights you have, including under the EU and UK General Data Protection Regulation (GDPR) and the Australian Privacy Act 1988.

Who we are

This site is operated by ZiruYai [registered legal entity name], based in Putumayo, Colombia [registered address]. For any privacy question or request, contact us at info@ziruyai.com.

Preparation and integration support is offered by Miranda Vires (Embody Psychedelic Integration) as a partner. Where you choose that support, Miranda acts as an independent controller of the information you share for it, under her own privacy policy.

Information we collect

• Details you give us directly — your name, email, phone/WhatsApp number and message when you book a consultation, email us, or contact us on WhatsApp.
• Readiness self-check — if you complete our self-check, we collect the answers you select and, if you choose to submit it, your first name and email so we can send your reflection and gentle next steps.
• Newsletter — your email address if you ask to receive occasional letters from us.
• Technical information — basic data your browser sends (such as approximate location, device and pages viewed) and, only with your consent, cookies or similar technologies. See "Cookies" below.

Health and sensitive information

Some of what you may share (for example, in the self-check, in a consultation, or when discussing suitability for a retreat) can relate to your physical or mental health. This is "special category" / "sensitive" information and receives extra protection. We only use it to respond to you and to talk with you about whether and how a retreat may be right for you, and only where you have given us your explicit consent by choosing to share it. You are never required to disclose health information through the website; the self-check result is intended as a private prompt for reflection and a conversation, not a medical assessment.

How we use your information and our legal bases

• To respond to your enquiry, arrange a consultation and answer your questions — to take steps at your request and our legitimate interest in responding.
• To send your self-check reflection, next steps, or newsletter — on the basis of your consent, which you can withdraw at any time.
• To provide and administer a retreat or support you have booked — to perform our agreement with you.
• To keep our site secure and understand how it is used — our legitimate interest, and, for non-essential cookies, your consent.
• To meet legal, tax or safety obligations — where the law requires it.

Cookies and analytics

Our site works without non-essential cookies. We use Google Analytics to understand how the site is used, and this only runs after you accept analytics cookies through our cookie banner; if you decline, no analytics cookies are set and no usage data is sent. We anonymize IP addresses. You can change your choice at any time by selecting Cookie settings, which reopens the banner. Video testimonials are embedded in privacy-enhanced mode, which does not set tracking cookies unless you play them.

Who we share it with

We do not sell your personal information. We share it only with service providers who help us operate, acting on our instructions under contract, including:

• Our email/newsletter provider (Brevo) to deliver messages you have asked for.
• Our scheduling provider (Cal.com) when you book a consultation, and our secure form provider (JotForm) if you complete an intake or consultation form. Health details you share on a form are held in encrypted form.
• Google Analytics to measure site usage, only after you consent (see "Cookies and analytics" above).
• Our website hosting provider to serve the site.

We may also disclose information if required by law, or to protect the safety of a guest or others.

International transfers

We operate from Colombia and use providers that may store data in other countries, including outside the EEA, UK or Australia. Where we transfer personal information across borders, we take steps to ensure it remains protected, such as using providers that offer recognized safeguards (for example, Standard Contractual Clauses).

How long we keep it

We keep your information only as long as needed for the purpose it was collected, to maintain our relationship with you, or to meet legal obligations. Newsletter and self-check contacts are kept until you unsubscribe or ask us to delete them. You can ask us to erase your information at any time (see below).

Your rights

Depending on where you live, you have rights over your personal information. Under the GDPR (EU/UK) these include the right to access, correct, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. Under the Australian Privacy Act you have the right to access and correct your information and to complain about how it is handled.

To exercise any of these, email info@ziruyai.com and we will respond within the timeframe the law requires. You may also unsubscribe from any email using the link in that email. If you believe we have not handled your information properly, you can complain to your local data protection authority (in the EU/UK) or to the Office of the Australian Information Commissioner (OAIC) in Australia.

Children

Our services and this website are intended for adults aged 18 and over. We do not knowingly collect information from children.

Security

We take reasonable measures to protect your information against loss, misuse and unauthorized access. No method of transmission over the internet is completely secure, but we work to keep your data safe and to limit who can access it.

Changes to this policy

We may update this policy from time to time. The "last updated" date above shows when it last changed. Significant changes will be reflected here.

Contact

Questions or requests about your privacy: info@ziruyai.com.